[cryptography] SSH small RSA public exponent

Tim Hudson tjh at cryptsoft.com
Sat Oct 12 18:41:52 EDT 2013

Does anyone recollect the history behind and the implications of the
(open) SSH choice of 35 as a hard-wired public exponent?

key.c:  private = RSA_generate_key(bits, 35, NULL, NULL);

i.e.  100011 binary compared to the more typical F4 10000000000000001 binary

I'm aware of the discussions on the history of e=3 at


More information about the cryptography mailing list